create-app

create-app is a skill for Claude Code from microsoft/managed-apps. It costs 36 tokens per session (5,865 once invoked), scanned A, original, MIT.

A project starter that creates a Microsoft App using React, a library for building interfaces, and Vite, a tool that runs and builds web projects. It sets up data connections, implements the agreed screens, and ends with the app running locally.

In plain words
What is it for?
Use it to scaffold a new Microsoft App, connect its data sources, build its initial interface, and start local development.
Why use it?
It turns a new app idea into a working local project instead of leaving you with an empty template. Cloud deployment remains a separate step.

Skill for Claude Code ✓ vendor

Written for Claude Code: allowed-tools in frontmatter. Also seen: names the AskUserQuestion tool.

Not installable: its command points at a path on the author’s own machine, so it runs nowhere else. The line is /Users/alice/work.

Part of the microsoft-managed-apps plugin — 22 skills, 1 agent shipped together

Good fit Use it to scaffold a new Microsoft App, connect its data sources, build its initial interface, and start local development.

Compare 6 skills from other repositories ↓
About the project

Microsoft Managed Apps is a project for building custom web applications with React, TypeScript, and Vite, and it provides Microsoft's official templates and development tooling. Developers use its SDK, CLI, and Vite plugin to create and manage these applications. Its catalogue add-ons help AI coding agents build Microsoft Managed Apps.

microsoft/managed-apps · 36 stars · on GitHub

Install

Getting it into your agent

This one installs as part of its plugin. Adding the marketplace and installing the plugin brings it with everything else the plugin ships.

Claude Code
/plugin marketplace add microsoft/managed-apps
Claude Code
/plugin install microsoft-managed-apps

Made for: Claude Code.

Or install microsoft-managed-apps, the plugin that ships this one along with the rest of its 22 skills, 1 agent.

Wrote this? Show the measurements

A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.

agentmods badge for create-app

README.md
[![agentmods](https://agentmods.dev/badge/skills/microsoft/managed-apps/create-app/github.svg)](https://agentmods.dev/skills/microsoft/managed-apps/create-app)
Your own site
<a href="https://agentmods.dev/skills/microsoft/managed-apps/create-app"><img src="https://agentmods.dev/badge/skills/microsoft/managed-apps/create-app/github.svg" alt="Measured on agentmods" height="20"></a>

Or the 80×15 button, for a site that already has a row of RSS and ATOM ones. Only the verdict fits; the numbers stay here.

agentmods 80×15 button for create-app

Your own site · 80×15
<a href="https://agentmods.dev/skills/microsoft/managed-apps/create-app"><img src="https://agentmods.dev/badge/skills/microsoft/managed-apps/create-app.svg" alt="Reviewed on agentmods" width="80" height="20"></a>
Per session 36 Skills are progressive disclosure: only the name and description are preloaded; the body loads when the skill is used.
When invoked 5,865 The whole file, excluding the scripts and references it only reads on demand.
Security scan A 0 findings. A grade says what 26 rules found in the file — not that it is safe.
Origin original No closer match found in the catalogue.
Token cost

What it costs to keep this loaded

Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.

ModelPer sessionOnce invoked
Fable 5.1 $0.00036 $0.05865
Opus 5.5 $0.00014 $0.02346
Sonnet 5.5 $0.00007 $0.01173
Haiku 4.5 $0.00004 $0.00587

Measured 4d ago against content hash b07a6ebd094b, method: parsed. Prices are Anthropic first-party input rates as of 2026-10-07, from the pricing page.

Security

Grade A, and why

create-app scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 4d ago.

A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.

Nothing flagged

None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.

plugins/microsoft-managed-apps/skills/create-app/SKILL.md · 353 lines

How it starts

The opening of the file, as written. The whole thing — 353 lines — stays where its author put it; the contents beside it link to each section on GitHub.

📋 Shared Instructions: shared-instructions.md — Cross-cutting concerns.

References:

Create a Microsoft App

This skill scaffolds a new Microsoft App end-to-end using @microsoft/managed-apps-cli (binary ms). The default outcome is a running local dev server, not a deployed cloud app. Deploying is a separate, explicit user choice via /deploy.

Workflow

  1. Memory Bank → 2. Prerequisites → 3. Infer App Spec → 4. Plan → 5. Auth → 6. Environment → 7. Scaffold → 8. Add Data Sources → 9. Add Backend (if requested) → 10. Implement App → 11. Local Dev → 12. Summary → 13. Memory Bank Update

Critical principle: when this skill ends and the user opens the local URL, they must see a functional app — connectors wired when required, screens implemented from the approved plan — not a bare template. Adding required data sources and implementing the UI happen inside this skill, before ms app dev is started. Do not defer them to "next steps."


Step 1: Check Memory Bank

Check for memory-bank.md per shared-instructions.md. If found, infer whether to resume or create a new app from the request: resume when it refers to the existing app or incomplete work; create a new sibling project when it clearly describes a different app. State the choice and continue. Ask only when the request genuinely fits both paths and choosing incorrectly could overwrite or modify existing work.

Step 2: Validate Prerequisites

Run prerequisite checks first — no point gathering requirements if the environment isn't ready. Full details in prerequisites-reference.md.

The commands below are shown in bash syntax. If you are running PowerShell on Windows, use the equivalents described in shared-instructions.md and the PowerShell example in prerequisites-reference.md instead of copying the bash snippets literally.

Read the full file on GitHub · 353 lines

Files

What ships with it

2 files beside SKILL.md in the same directory: the scripts, references and assets a skill reads on demand. Not counted in the per-session cost; read them before you install if any of them is executable.

Changes

What this file has done since we first saw it

Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.

  1. 4d ago Changed · +19 lines b07a6ebd094b
  2. 5d ago Changed · -2 lines 71469d0eb1a8
  3. 10d ago Changed · +16 lines e875297e2105
  4. 29d ago Changed · +2 lines 0b5e464cdf87
  5. 1mo ago Changed · -11 lines 1201723509e6
  6. 1mo ago Changed · +1 lines 59191b669a27
  7. 1mo ago Changed · +1 lines 7732f37890ab
  8. 2mo ago Changed · +6 lines b1df1a73b4b0
  9. 2mo ago Changed 65200e20f971
  10. 2mo ago First seen · 321 lines · 36 tokens per session scan A d1be52d261ef

Subscribe to this mod's changes

create-app is a skill published in the GitHub repository microsoft/managed-apps (36 stars, last pushed 3d ago), licensed MIT. It adds 36 tokens to every session and 5,865 once invoked, about $0.0001 per session on Opus 5.5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-31.

Related

create-app compared with skills from other repositories

create-app next to 6 skills from other repositories
ModTypeStarsLast pushLicenceScanTokensWorks with
create-appmicrosoft/managed-appsSkill363d agoMITA36Claude Code
build-ghost-appTryGhost/GhostSkill56ktodayMITA44Claude Code, Codex
chakra-ui-builderchakra-ui/chakra-uiSkill41ktodayMITA214Claude Code, Codex
material-ui-tailwindmui/material-uiSkill99kyesterdayMITA67Claude Code, Codex
fuzzy-rankingTanStack/tableSkill29k5d agoMITA62Claude Code, Codex
r3f-best-practiceszebbern/claude-code-guideSkill4.7kyesterdayMITA74Claude Code, Codex
git-safetytamagui/tamaguiSkill14k2d agoMITA0Claude Code